A log analysis framework is provided that includes a core that is configured to support the execution of one or more extensions and one or more analyzers. The core provides a common infrastructure, base classes, and utilities for supporting the execution of the extensions and the analyzers. Extensions are software components configured to parse a log file and to trigger events based upon the contents of the log file. Analyzers are executable software components configured to consume events generated by the extensions, to analyze the events, and to generate a report based on the events.